diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 5d01375..363e606 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -67,6 +67,7 @@ jobs:
       pull-requests: write # to be able to comment on released pull requests
     env:
       NPM_CONFIG_PROVENANCE: 'true'
+      NPM_CONFIG_IGNORE_SCRIPTS: 'true'
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     if:
       ${{ github.repository == 'epicweb-dev/eprec' &&
@@ -74,24 +75,16 @@ jobs:
       github.ref) && github.event_name == 'push' }}
     steps:
       - name: ⬇️ Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - name: ⎔ Setup node
-        uses: actions/setup-node@v6
-        with:
-          node-version: lts/*
-
-      - name: ⎔ Setup bun
-        uses: oven-sh/setup-bun@v2
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
-          bun-version: latest
-
-      - name: 📥 Download deps
-        run: bun install
-        env:
-          HUSKY_SKIP_INSTALL: true
+          node-version: 24
+          registry-url: https://registry.npmjs.org
+          package-manager-cache: false
 
       - name: 🚀 Release
-        uses: cycjimmy/semantic-release-action@v5.0.2
+        uses: cycjimmy/semantic-release-action@ba330626c4750c19d8299de843f05c7aa5574f62 # v5.0.2
         with:
           semantic_version: 25